ui.browser-test.asi11-1.dev.messaging.sbgservices.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0b:c9:f8:a8:4a:1f:40:dc:6f:9e:10:a6:ad:ba:1f:ab was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ui.browser-test.asi11-1.dev.messaging.sbgservices.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:c9:f8:a8:4a:1f:40:dc:6f:9e:10:a6:ad:ba:1f:ab
Serial Number (int): 15670202993052256690919434814999895979
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 3f:5f:85:27:ae:e4:38:cc:f2:91:be:ea:d9:e1:c8:1a:9b:30:f7:8a
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): bf:24:67:61:30:24:85:ff:d4:52:43:39:ca:99:f6:df:79:b3:74:1e
Fingerprint (sha256): 17:0d:c0:dc:78:6c:80:25:4f:9e:8b:80:67:7b:8b:98:d8:44:cf:89:5a:ea:7a:20:53:1b:fc:b2:41:1f:36:39

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate ui.browser-test.asi11-1.dev.messaging.sbgservices.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ui.browser-test.asi11-1.dev.messaging.sbgservices.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ui.browser-test.asi11-1.dev.messaging.sbgservices.com

Other certificates including the domain name sbgservices.com

(limited to 100 certificates)
ui.browser-test.leahyc-2.dev.messaging.sbgservices.com
ui.browser-test.ama04-1.dev.messaging.sbgservices.com
ui.leahyc-2.dev.messaging.sbgservices.com
oauth.test.sweeps.sbgservices.com
ui.browser-test.asi11-1.dev.messaging.sbgservices.com
ui.browser-test.dev.messaging.sbgservices.com
oauth.sweeps.sbgservices.com
*.test.ff.sbgservices.com
ui.browser-test.cbe01-1.dev.messaging.sbgservices.com
assetstore.test.gs.sbgservices.com
ui.asi11-1.dev.messaging.sbgservices.com
publicgateway.test.gs.sbgservices.com
promotions-spin-service.promotions.sbgservices.com
*.ff.sbgservices.com
oauth.autotest.sweeps.sbgservices.com
api.messaging.sbgservices.com
test.feedback.s6.sbgservices.com
ui.browser-test.preenn-1.dev.messaging.sbgservices.com
rcs.sbgservices.com
ui.ama04-1.dev.messaging.sbgservices.com
rc.ges.sbgservices.com
*.dev.ff.sbgservices.com
push.staging.gamingservices.sbgservices.com
push.gs.sbgservices.com
ui.preenn1.dev.messaging.sbgservices.com
ui.ama04-1.dev.messaging.sbgservices.com
oauth.autotest.sweeps.sbgservices.com
ui.preenn-1.dev.messaging.sbgservices.com
ui.test.messaging.sbgservices.com
ui.jamesr-1.dev.messaging.sbgservices.com
api.messaging.sbgservices.com
push.gamingservices.sbgservices.com
ui.leahyc-1.dev.messaging.sbgservices.com
minigames.ges.sbgservices.com
clearpass.skybettingandgaming.com
feedback.s6.sbgservices.com
ui.am04-1.dev.messaging.sbgservices.com
ui.messaging.sbgservices.com
ui.browser-test.ama04-1.dev.messaging.sbgservices.com
*.test.sweeps.sbgservices.com
ui.browser-test.leahyc-1.dev.messaging.sbgservices.com
demo-portal.test.ges.sbgservices.com
ui.leahyc-2.dev.messaging.sbgservices.com
rcs.sbgservices.com
push.gamingservices.sbgservices.com
ui.browser-test.leahyc-2.dev.messaging.sbgservices.com
ui.leahyc-1.dev.messaging.sbgservices.com
ui.ama04-1.dev.messaging.sbgservices.com
demo-portal.test.ges.sbgservices.com
push.test.gamingservices.sbgservices.com
demo-portal.test.ges.sbgservices.com
promotions-spin-service.promotions.sbgservices.com
ui.browser-test.asi11-1.dev.messaging.sbgservices.com
api.test.s6.sbgservices.com
promotions-spin-service.promotions.stage.sbgservices.com
ci.api.ff.sbgservices.com
ui.leahyc-2.dev.messaging.sbgservices.com
*.staging.sbgservices.com
*.loadtest.sweeps.sbgservices.com
rcs.ges.sbgservices.com
ui.jamesr-1.dev.messaging.sbgservices.com
ui.browser-test.asi11-1.dev.messaging.sbgservices.com
chris.test.s6.sbgservices.com
ui.ama04-1.dev.messaging.sbgservices.com
ui.messaging.sbgservices.com
oauth.test.sweeps.sbgservices.com
ui.browser-test.ama04-1.dev.messaging.sbgservices.com
*.prod.sweeps.sbgservices.com
push.gs.sbgservices.com
rc.ges.sbgservices.com
gate.sbgservices.com
ui.iba01-2.dev.messaging.sbgservices.com
api.staging.skysportsquiz.com
*.staging.sbgservices.com
ui.leahyc-2.dev.messaging.sbgservices.com
ui.asi11-1.dev.messaging.sbgservices.com
ui.test.messaging.sbgservices.com
*.test.s6.sbgservices.com
promotions-spin-service.promotions.stage.sbgservices.com
*.prod.itv7.sbgservices.com
oauth.autotest.sweeps.sbgservices.com
oauth.loadtest.sweeps.sbgservices.com
ui.ama04-1.dev.messaging.sbgservices.com
skyvegas.com
ui.iba01-1.dev.messaging.sbgservices.com
oauth.sweeps.sbgservices.com
promotions-spin-service.promotions.sbgservices.com
*.ff.sbgservices.com
api.s6.sbgservices.com
ui.browser-test.iba01-1.dev.messaging.sbgservices.com
promotions-spin-service.promotions.sbgservices.com
rcs.sbgservices.com
demo-portal.test.ges.sbgservices.com
ui.preenn1.dev.messaging.sbgservices.com
promotions-spin-service.promotions.stage.sbgservices.com
sbgservices.com
*.staging.ff.sbgservices.com
ui.leahyc-1.dev.messaging.sbgservices.com
publicgateway.gs.sbgservices.com
ui.messaging.sbgservices.com

Certificate

The complete raw certificate details for ui.browser-test.asi11-1.dev.messaging.sbgservices.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8oj9Xu2JNRDeT7WVxBcv
oCY59hmB3oxrz3nlD9ISK6Zh70bQ5cQCGNURRAAQj7fjO0ccbtfCyrsHdJjzRact
8tKD+fJpYZrSN41t40FFvLM70Fi5PefW/cBNczd3FDna6CBRwi7QGdXOQbkHGhnI
Tm5q2VUiqJPAINx4hCDPLNi9nAlSMdafbFKp4Fz5FiLHmpNGl866vkXmslZ9BNHd
BoQn6fhCkRlzTRQ++OOW8cN5AGlzbfzEwAf4sGCBT93N3LvwYsodRUKnNkI/ZOy1
5FJ2gUMmPQ7oqOsJFyh5wrBbL/RoHlUANY6qUv6Oa6qVf6OyvC5/rMw6vtFT1vnA
BwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15670202993052256690919434814999895979
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ui.browser-test.asi11-1.dev.messaging.sbgservices.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30617221955221465896603878709499535198087398287393790501075726910428840188916575472579545501491017328333030618584219907990773992285007458536196613258803615299587985801593504529190811127445775299631152910937489448616709159226360110073872407665175880305405046769195529251891643829686819718342257890270690146507347271461147947689561181694725736158745027203899929312457504515305954792270024893751099766611551041961877275485197502591409686947330784958390371314721876412782210974212318539170506531359008290551342752597899107029860383412227228187368368379386794785592362971625060003385208977142244858759039019931096659378183
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3f5f8527aee438ccf291beead9e1c81a9b30f78a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ui.browser-test.asi11-1.dev.messaging.sbgservices.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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